From 0e9c44387c681bd492f350c122a7c581fafac70c Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Mon, 30 Dec 2024 15:57:36 +0900
Subject: [PATCH] Fix double escape of lang code in member group title #2459

---
 modules/member/member.admin.controller.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/member/member.admin.controller.php b/modules/member/member.admin.controller.php
index 328c66617..0fb94a9a8 100644
--- a/modules/member/member.admin.controller.php
+++ b/modules/member/member.admin.controller.php
@@ -1357,7 +1357,7 @@ class MemberAdminController extends Member
 		}
 		$args->group_srl = !empty($args->group_srl) ? $args->group_srl : getNextSequence();
 		$args->list_order = $args->list_order ?? $args->group_srl;
-		$args->title = escape($args->title);
+		$args->title = escape($args->title, false, true);
 		$args->description = escape($args->description);
 
 		$output = executeQuery('member.insertGroup', $args);
@@ -1408,7 +1408,7 @@ class MemberAdminController extends Member
 			$output = executeQuery('member.updateGroupDefaultClear', $args);
 			if(!$output->toBool()) return $output;
 		}
-		$args->title = isset($args->title) ? escape($args->title) : null;
+		$args->title = isset($args->title) ? escape($args->title, false, true) : null;
 		$args->description = isset($args->description) ? escape($args->description) : null;
 
 		$output = executeQuery('member.updateGroup', $args);